Security & trust

Passkeys, 2FA, and strong passwords

Protect every login from My profile. Add passkeys (fingerprint, Face ID, Windows Hello, or a security key), enable email or Google Authenticator 2FA, and update passwords under organisation rules — minimum length, optional strong-password checks, and periodic expiry.

  • Passkeys — sign in like GitHub with biometrics or a security key
  • Email 2FA — codes from the platform email set by CentrixERP super admin
  • Google Authenticator (TOTP) 2FA with QR setup
  • Strong password policy when enabled — uppercase, lowercase, and a number
My profile · security

My profile · security

Passkeys, 2FA, and password settings on the same CentrixERP login.

Trust centre

How CentrixERP protects day-to-day access

Built for Kenya operators who need clear login controls, organisation rules, and fiscal printouts — without inventing certifications we have not published here.

Login you control

Passkeys (biometrics or security key), email 2FA, and Google Authenticator TOTP from My profile.

  • Passkeys — fingerprint, Face ID, Windows Hello, or a security key
  • Email 2FA codes from the platform email
  • Google Authenticator (TOTP) with QR setup

Organisation password rules

Platform and org settings enforce length, optional strong-password checks, and expiry.

  • Configurable minimum length (default 8)
  • Optional uppercase, lowercase, and number requirements
  • Password expiry (e.g. 90 days) when enabled

Sessions & screen lock

Idle timeouts and screen lock under Administration security settings reduce unattended till risk.

  • Screen lock on the workstation
  • Session idle timeouts
  • Users and roles per organisation

Hosted on CentrixERP servers

You subscribe to an industry package — your team is not managing local ERP machines or fragmented data stores.

  • Access from computers, phones, and tablets
  • Same organisation for POS, Backoffice, Accounting, and mobile
  • Branches and roles when your package includes them

Kenya fiscal workflows

KRA eTIMS QR on fiscal invoices and thermal receipts when configured for the organisation.

  • Scan to verify on eTIMS
  • Works with cash and multi-tender sales
  • Printouts configured under All documents

On the floor

Who controls what

Cashiers

Open External POS with the role you assign — no need for Backoffice access if they only sell.

Managers

Approvals, end of day, and branch visibility follow organisation roles — not a shared spreadsheet password.

Owners

Packages decide which apps appear after login. Passkeys and 2FA live under My profile for each user.

Questions about access?

Open Instant trial and check My profile yourself — or contact us about roles and branches for your outlets.